Allwell Behavioral Health Services
Disclosed May 23, 20224 years ago30,952 affectedConfirmed
The covered entity (CE), Allwell Behavioral Health Services, reported that it was the subject of a hacking incident that affected the protected health information (PHI) of 29,972 individuals. The PHI involved included names, addresses, dates of birth, Social Security and drivers’ license numbers, diagnoses/conditions, and other treatment information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards.
What is known
| People affected | 30,952 (as reported by the organization) |
|---|---|
| Disclosed | May 23, 2022 |
| Happened | Mar 5, 2022 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2022 data breach report: Allwell Behavioral Health Servicesin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Allwell Behavioral Health Services (Healthcare Provider, OH)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | May 23, 2022 | 4 |
| HHS archivetotal | May 23, 2022 | 29,972 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Allwell Behavioral Health Services, reported that it was the subject of a hacking incident that affected the protected health information (PHI) of 29,972 individuals. The PHI involved included names, addresses, date · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.